Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3b1e66da-dbb7-3188-a938-e17a0d6f940b.roa
File: 3b1e66da-dbb7-3188-a938-e17a0d6f940b.roa (raw, json)
Hash identifier: QsxEU0wBNZ5Q43gi6CkeSa6hlE9k/3z432kp2OSZ0lg=
Subject key identifier: CB:B9:FB:61:7A:42:52:46:00:98:10:0B:2A:BE:CC:47:7E:EA:03:39
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EBDB00D293244F6FCC5A74E80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3b1e66da-dbb7-3188-a938-e17a0d6f940b.roa
Signing time: Fri 29 Jul 2022 12:00:00 +0000
ROA not before: Fri 29 Jul 2022 12:00:00 +0000
ROA not after: Sat 03 Sep 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.220.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:bd:b0:0d:29:32:44:f6:fc:c5:a7:4e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 29 12:00:00 2022 GMT
Not After : Sep 3 04:00:00 2022 GMT
Subject: CN=cbcd2339-9299-43f7-9bff-e7efda3b41f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1b:36:cb:9c:f4:65:7b:c5:b1:77:9d:43:8c:
fb:0d:a2:76:b4:b7:11:3c:b6:8c:79:fa:6b:e4:ff:
52:9a:9c:91:0e:bf:98:10:4f:db:4b:97:33:f8:97:
15:58:27:5b:27:4d:ac:75:25:25:c1:d5:6a:ab:58:
e4:57:85:34:d6:16:39:9a:37:80:a6:df:6b:59:e7:
8f:79:1c:36:1f:71:f4:70:8f:36:2b:59:a5:14:d6:
2c:29:a6:fa:a0:83:66:ba:17:7e:2f:f9:cc:31:37:
c3:eb:8f:83:9d:c1:c8:71:6a:3b:87:e8:41:6a:b2:
9e:7f:b3:d9:0b:0e:d7:e9:cb:05:47:61:c9:3f:76:
87:07:28:c3:b7:43:53:68:eb:d8:48:10:7a:8d:da:
33:e2:10:05:c4:9c:17:c7:2b:ab:28:41:03:b9:a2:
93:23:a5:5a:1a:80:44:ca:60:84:73:66:29:4b:b7:
cf:f9:7f:ee:b3:ad:0a:d6:ce:08:c1:1f:2e:b9:a8:
43:9c:31:d9:dc:a0:22:b1:ac:ab:31:76:90:8e:7c:
24:cd:fa:57:f1:b8:d7:85:cb:07:89:6b:8d:28:ab:
59:5b:46:ca:a1:5d:2b:d7:c4:26:13:c6:b4:49:d9:
6a:51:1e:1e:5c:4c:53:1c:42:32:7d:2f:0a:37:57:
2e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B9:FB:61:7A:42:52:46:00:98:10:0B:2A:BE:CC:47:7E:EA:03:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3b1e66da-dbb7-3188-a938-e17a0d6f940b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.220.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:95:ad:b2:7d:48:57:f5:bb:cc:23:e3:87:60:43:f3:5a:88:
94:93:a7:3f:fe:b8:a2:7a:cb:56:d2:cd:b3:18:9b:e4:66:f0:
28:c0:7f:3b:9d:81:b9:65:28:d2:0b:08:6e:1a:22:32:29:6b:
63:8a:43:40:69:cc:4c:71:10:08:cf:16:df:8f:86:1a:b5:e3:
cb:eb:9d:8f:a7:22:0f:b7:ee:2f:90:62:71:f8:2e:d7:98:58:
2b:ba:70:13:13:f1:07:7c:c1:30:27:43:17:9d:04:d7:c2:a9:
19:a9:bb:3e:d9:30:d8:10:ec:0c:49:f1:b6:25:b2:04:47:51:
58:1d:a1:06:be:c5:6b:48:ab:a6:88:bc:f0:5d:43:1b:e1:f0:
6e:1a:5d:22:de:7f:8c:7a:f7:16:07:64:d6:47:8f:ea:79:d9:
18:85:01:70:2e:91:84:75:e2:c8:d2:08:28:9a:54:3d:69:30:
20:da:47:86:fc:b5:52:fe:bc:7c:99:f1:e5:51:48:72:2f:40:
f5:6d:26:55:78:b6:fe:39:7e:f0:7c:7a:e3:64:15:f0:5e:1d:
08:06:99:05:0e:63:24:1e:73:7e:90:36:b4:9e:b1:a5:5a:10:
8e:ec:ed:31:e7:7c:05:54:6c:91:50:5b:70:f0:21:34:15:f8:
15:4d:ac:a4
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD69sA0pMkT2/MWnToAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDcyOTEyMDAwMFoXDTIyMDkwMzA0MDAwMFowLzEtMCsGA1UEAxMk
Y2JjZDIzMzktOTI5OS00M2Y3LTliZmYtZTdlZmRhM2I0MWYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhs2y5z0ZXvFsXedQ4z7DaJ2tLcRPLaMefpr
5P9SmpyRDr+YEE/bS5cz+JcVWCdbJ02sdSUlwdVqq1jkV4U01hY5mjeApt9rWeeP
eRw2H3H0cI82K1mlFNYsKab6oINmuhd+L/nMMTfD64+DncHIcWo7h+hBarKef7PZ
Cw7X6csFR2HJP3aHByjDt0NTaOvYSBB6jdoz4hAFxJwXxyurKEEDuaKTI6VaGoBE
ymCEc2YpS7fP+X/us60K1s4IwR8uuahDnDHZ3KAisayrMXaQjnwkzfpX8bjXhcsH
iWuNKKtZW0bKoV0r18QmE8a0SdlqUR4eXExTHEIyfS8KN1cuhQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMu5+2F6QlJGAJgQCyq+zEd+6gM5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvM2IxZTY2ZGEtZGJiNy0z
MTg4LWE5MzgtZTE3YTBkNmY5NDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCEtwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAn5Wtsn1IV/W7zCPjh2BD81qIlJOnP/64onrLVtLNsxib5GbwKMB/O52B
uWUo0gsIbhoiMilrY4pDQGnMTHEQCM8W34+GGrXjy+udj6ciD7fuL5Bicfgu15hY
K7pwExPxB3zBMCdDF50E18KpGam7Ptkw2BDsDEnxtiWyBEdRWB2hBr7Fa0irpoi8
8F1DG+HwbhpdIt5/jHr3Fgdk1keP6nnZGIUBcC6RhHXiyNIIKJpUPWkwINpHhvy1
Uv68fJnx5VFIci9A9W0mVXi2/jl+8Hx642QV8F4dCAaZBQ5jJB5zfpA2tJ6xpVoQ
juztMed8BVRskVBbcPAhNBX4FU2spA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 04:27:53 2025 by rpki-client